1. USER INFORMATION

Who is responsible for the processing of your personal data?

Madrid Urban Properties S.L., with CIF B87514824 and registered office in Madrid, registered in the Mercantile Registry of Madrid, Volume 34.568, Folio 54, Section 8, Sheet M-621879, is responsible for the processing of user’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

What type of data do we request and process?

Depending on the form or method used to obtain your data, we always request the minimum necessary to fulfill the purposes detailed in each case.

According to the form where we have obtained your personal data, we will treat them confidentially to achieve the following purposes:

In the Contact form:

   • Respond to inquiries or any type of request made by the user through any of the contact methods available on the responsible party’s website.

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

   • Send commercial advertising communications by email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that enable commercial communications. These communications will be carried out by the responsible party and will be related to its products and services, or those of its partners or suppliers, with whom it has reached some promotional agreement. In this case, third parties will never have access to personal data.

     (by the consent of the interested party, 6.1.a GDPR)

   • Conduct statistical analysis and market studies.

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

In the Newsletter form:

   • Send informative bulletins, news, offers, and promotions online.

     (by the consent of the interested party, 6.1.a GDPR)

In the Curriculum form:

   • Involve the interested party in personnel selection processes and analyze the applicant’s profile with the aim of selecting a candidate for the responsible party’s vacant position.

     (by the consent of the interested party, 6.1.a GDPR)

In the Testimonial form:

   • Moderate and publish on the website the user’s experiences, opinions, and suggestions about a product or service.

     (by the consent of the interested party, 6.1.a GDPR)

In the User Registration form:

   • Manage the user’s account to provide personalized access to the website and the interactive services it offers.

     (by the consent of the interested party, 6.1.a GDPR)

In the Reservations form:

   • Formalize reservations at the responsible party’s establishment.

     (for the execution of a contract or pre-contract, 6.1.b GDPR)

   • Send commercial advertising communications by email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, to clients, enabling commercial communications referring to products or services that are similar to those initially contracted with the client (art. 21.2 LSSI).

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

In the Appointments form:

   • Schedule appointments and meetings with the responsible party.

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

 Send commercial advertising communications by email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, to clients, enabling commercial communications referring to products or services that are similar to those initially contracted with the client (art. 21.2 LSSI).

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

2.  • Manage, maintain, improve, or develop the services provided.

     (for the execution of a contract or pre-contract, 6.1.b GDPR)

     Manage your online purchase or order, process payment, and proceed with its shipment or activation, based on the general contracting conditions.

     (for the execution of a contract or pre-contract, 6.1.b GDPR)

3.  • Send commercial quotes about products and services.

     (for the execution of a contract or pre-contract, 6.1.b GDPR)

4.  • Send commercial advertising communications by email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, enabling commercial communications. These communications will be carried out by the responsible party and will be related to its products and services, or those of its partners or suppliers, with whom it has reached some promotional agreement. In this case, third parties will never have access to personal data.

     (by the consent of the interested party, 6.1.a GDPR)

5.  • Respond to inquiries or any type of request made by the user through any of the contact methods available on the responsible party’s website.

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

Video surveillance

   • Purpose Security and access control, labor control and internal activity Legitimation Public interest for security and access control and Legitimate interest of the Responsible based on Art. 20.3 of the Workers’ Statute Conservation Up to a maximum of 30 days

     (by the consent of the interested party, 6.1.a GDPR)

Images and recordings

   • File with static and/or dynamic images. Includes publication in the media of the data controller or third parties.

     (by the consent of the interested party, 6.1.a GDPR)

Clients and suppliers

   • Commercial management with clients and suppliers

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

Advertising exclusion

   • Data management to avoid sending commercial communications to those who have expressed their refusal or opposition to receiving them.

     (for compliance with a legal obligation, 6.1.c GDPR)

Rights of the interested parties

   • Attend to citizens’ requests in the exercise of the rights established by the GDPR

     (for compliance with a legal obligation, 6.1.c GDPR)

Prevention of Money Laundering

   • Data management for the prevention of Money Laundering and Terrorism Financing.

     (for compliance with a legal obligation, 6.1.c GDPR)

Web, app, and other platforms users of the responsible party

   • User identification data accessing the corporate website.

     (by the legitimate interest of the responsible party, art. 6.1.f GDPR)

Connection to Wifi network

   • Conduct statistical analysis and market studies. ( by the legitimate interest of the responsible party, art. 6.1.f GDPR )

   • Conduct satisfaction and quality surveys. ( by the legitimate interest of the responsible party, art. 6.1.f GDPR )

     (by the consent of the interested party, 6.1.a GDPR)

Data of minors or vulnerable individuals

   • The responsible party will not collect or process personal data of minors under fourteen years of age without fully complying with the requirements established in the applicable data protection regulations, regarding compliance with the duty to inform and obtaining necessary consents. The collected data will be processed for the management of the informed purposes. The responsible party has appropriate security measures for the security of this data.

     (by the consent of the interested party, 6.1.a GDPR)

Legal representatives and contact persons

   • In the event that you are a legal representative or contact person of any of the entities or individuals with which the Foundation relates, the responsible party will process your data to control the development of the intended relationship.

     (by the consent of the interested party, 6.1.a GDPR)

Credit information

   • Credit information policy * 

Before contracting our services, we will necessarily process the personal data you have provided us, as well as those we obtain from the Asnef File. During the customer registration process, we will process your personal data for the following purposes: 1- Manage your customer registration request and proceed with the application of the appropriate measures to manage the service contracting. 2- Assess your financial and credit solvency through consultation of the Asnef File, Cirbe and similar, where we will assess the capacity to meet the intended economic obligations. 3- Assist you during the process of contracting the intended services. 4- Analyze your current income and current economic situation, all your assets and liabilities, including the data you provide us about your family unit or others you provide us, as well as the data we may request from you such as pay slips, tax returns, etc. Likewise, the information you provide us as guarantor or guarantor during the mortgage contracting process will also be analyzed

     (by the consent of the interested party, 6.1.a GDPR)

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the treatment or there are legal prescriptions that dictate their custody and when it is no longer necessary for this, they will be deleted with appropriate security measures to guarantee the anonymization of the data or their total destruction.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen unless necessary for the development and execution of the treatment purposes, to our service providers related to communications, with whom the responsible party has signed the confidentiality and data processing contracts required by current privacy regulations.

Do we carry out international transfers?

In accordance with the provisions of article 44 of the GDPR, the authorization for international transfer of data to a country that has not been declared as a country with an adequate level of protection can only be granted if sufficient guarantees are obtained. Thus, it may be granted if the data controller provides a written contract, concluded between the data exporter and importer, in which the necessary guarantees of respect for the protection of the interested parties are provided and the exercise of their rights is guaranteed.

The responsible party may have services from providers that have servers or offices elsewhere, and therefore, these transfers may be made. To consult the updated list of providers, consult with the responsible party or through [email protected]

What are your rights?

The rights that assist the user are:

   • Right to withdraw consent at any time.

   • Right of access, rectification, portability, and deletion of your data, and limitation or opposition to its processing.

   • Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details to exercise your rights:

For more information about privacy guarantees, you can contact the responsible party through Madrid Urban Properties S.L., with VAT number B87514824, headquartered in Madrid, and registered in the Mercantile Registry of Madrid, Volume 34.568, Folio 54, Section 8, Sheet M-621879. Email: [email protected]

VALIDITY

This privacy policy has been in effect since 16/05/2023. The responsible party reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that may apply, or for other technical, operational, commercial, corporate reasons, etc. If the rights of the users are affected as a result of the changes, the responsible party commits to informing about the reasons.